Location UK / Belfast
Job Type Permanent full-time
Salary Not disclosed
Updated 3 days ago
PwC is looking to recruit DevOps specialists at a Senior Associate grade to extend the capability of the DevSecOps business.
PwC is looking to recruit DevSecOps specialists at a Senior Associate grade to extend the capability of the DevSecOps business.
In this role, you will act as a DevSecOps subject matter expert and deliver security-focused engagements with development and security teams. You will help clients embed leading application and software security practices into their DevOps processes, as well as develop the PwC DevSecOps methodology.
The ideal candidate will be experienced in DevSecOps practices, Native Cloud, software engineering and have demonstrable experience of working with clients in an advisory or consultative environment. The ability to communicate application & software security to business leaders is a key value.
This role would suit someone who is looking for a unique opportunity to extend and develop their DevSecOps knowledge to establish themselves as a leader in modern application delivery and software security techniques.
Delivery of DevSecOps assignments, including producing documentation and reports.
Providing advice on security best practices, and guide clients in developing, adopting and enforcing security policies appropriate to their cloud platforms of choice.
Acting as a mentor to the development teams with a view to implementing leading application development and security practices.
Reviewing and enhancing security architectural designs, blue prints and roadmaps.
Creating, reviewing and implementing security design patterns to support application architectures.
Consulting with application business owners to support development of business requirements.
Creating and enhancing CI/CD pipelines to include security tools and checks.
Driving the development of DevSecOps toolkits, methodologies and accelerators.
Determining security requirements, planning, implementing and preparing codified security standards, policies, and procedures.
Understanding current compliance frameworks for cloud providers, as well as future trends
Translating customer business issues/opportunities into technical solution/business requirements.
Performing manual security assessments & static code analysis against software source code, web applications and API’s across a variety of technology stacks
Supporting senior members of the team in developing client proposals and solution offerings.
Maintaining technical IT knowledge and certifications, sharing this knowledge with junior team members.
Working with colleagues in other services areas and support our clients’ cyber security needs.
You will have hands-on experience working within a DevOps environment where you have demonstrated success in helping enterprise clients deploy important workloads to the cloud. You will have played a pivotal role in building and running the automated test cycle to ensure deployments are secure and compliant.
As a specialist, you will have experience identifying, assessing and providing remediation options for software, web application and cloud technology related security risks.
You will possess a solid understanding of native cloud security tools on one or more of the major cloud platforms.
You have advanced knowledge of cloud security principles from organizations such as CSA, NIST, NCSC, and CSCC.
You can demonstrate hands-on experience in building and securing CI/CD pipelines.
You have extensive experience using DevOps tools, such as Terraform, Jenkins, Ansible, Git, Gradle, Docker, Kubernetes, Puppet, etc.
You have extensive experience with container orchestration.
You are experienced with agile methodologies such as Scrum, Kanban, and Lean.
You have extensive experience of security focused Software Composition Analysis, SAST and DAST tools, such as Sonatype, Fortify, Veracode, Contrast, AppScan, etc., and can integrate them into automated pipelines.
You have a detailed understanding of security operations and risk.
You possess strong knowledge of microservice architectures’ and API based solutions.
You have expert familiarity with multiple programming languages and secure coding practices.
Undergraduate degree or equivalent (preferably 2 1 or higher) in a relevant field (e.g. Computer Engineering, Computer Science, Information Security) or in a STEM major (Science, Technology, Engineering, or Math) is strongly preferred and a Master’s degree in relevant field is desired.
Cloud security certifications such as CCSK, CCSP, CCSS, PCSM, AWS Certified Security, MCSA, MCSE, and Professional Google Cloud Security Engineer are desirable.
Security accreditations such as CSSLP, CREST, OCSP, OSCE, and CISSP are not required but are highly desirable.
Variety – An impressive list of clients with different needs and issues at both a technical and strategic level.
Opportunity – To develop your technical and business skills and enhance your business advisory, presentational and interpersonal skills.
Support – We work as a team and support each other on a day-to-day basis. We also actively encourage an ongoing exchange of knowledge across the many specialists operating within PwC.
Training – PwC is recognized for the quality of its training programs that cover both technical and ‘soft’ skills.
Challenge – We work in an atmosphere which encourages you to be proactive and imaginative with the emphasis always on serving clients’ needs
Location: Belfast, London, Edinburgh or Birmingham
Travel: Up to 70%